
Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
File: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft (raw, json)
Hash identifier: MOLzOuXxdJn4P9gPsZMDFaM4Fbtr3UDWrTOQr8AuOlM=
Subject key identifier: 44:96:85:2D:9E:1A:56:99:3E:71:F0:E3:D8:0C:C5:30:E3:9F:C5:9A
Authority key identifier: 06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
Certificate issuer: /CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Certificate serial: 486D6B798CCE27B5830B492126DA1E0DBF6BFBCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
Manifest number: 01FF
Signing time: Sat 26 Jul 2025 11:09:18 +0000
Manifest this update: Sat 26 Jul 2025 11:04:18 +0000
Manifest next update: Sun 27 Jul 2025 13:31:18 +0000
Files and hashes: 1: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl (hash: JCSy/T5HYScfAb3/5j5DbczLJBqOroS5Vd1GsZvgom8=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:6d:6b:79:8c:ce:27:b5:83:0b:49:21:26:da:1e:0d:bf:6b:fb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Validity
Not Before: Jul 26 11:04:18 2025 GMT
Not After : Jul 27 13:31:18 2025 GMT
Subject: CN=4496852D9E1A56993E71F0E3D80CC530E39FC59A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:9d:87:b7:86:ab:5c:e4:6e:42:f0:d9:f5:
4b:ec:2b:e8:4d:98:0d:29:6b:42:88:ea:9b:a4:00:
81:2b:88:7d:32:a7:6b:ec:80:72:77:95:bb:14:64:
3e:cb:74:22:ed:df:63:70:3d:a8:11:76:3b:f6:cf:
24:ad:6a:b4:a4:97:66:b5:9f:ed:f5:6f:a7:f2:77:
32:c4:56:fc:a3:8a:4a:f9:b7:df:ec:7c:5c:b7:27:
73:06:21:f7:c1:69:af:38:1f:5c:dc:d9:01:a9:19:
03:37:33:f2:ed:e3:b4:20:4d:24:f9:5f:85:0d:69:
1e:1f:fb:0b:b7:67:9b:14:ee:0c:70:41:a0:d7:c1:
d3:1a:87:6a:39:cf:dd:00:d3:4e:6b:ec:40:28:f3:
03:d8:f6:16:d0:f6:b2:79:28:25:85:61:e3:28:b2:
e4:8e:fc:58:ef:24:b2:ab:ec:c2:ba:a9:e2:5a:6e:
58:4d:7c:e5:87:e9:f8:0a:91:fa:7b:d5:39:b7:68:
49:19:da:92:16:aa:d3:dd:f7:dd:19:7b:06:a6:b2:
06:82:44:ba:6c:f5:d6:14:24:8c:77:27:b2:f9:90:
d1:10:fe:5c:38:2d:f9:39:af:e2:a5:9c:94:b7:e4:
92:ba:52:e4:ca:c9:fd:9c:a0:7e:bc:42:36:fb:21:
be:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:96:85:2D:9E:1A:56:99:3E:71:F0:E3:D8:0C:C5:30:E3:9F:C5:9A
X509v3 Authority Key Identifier:
keyid:06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:55:e0:6e:95:53:c2:1a:a9:4a:3d:78:82:2f:c5:68:6e:34:
9f:8e:16:1d:2c:a3:8b:12:99:e3:f1:61:ea:48:f1:40:c1:c4:
e0:78:4d:67:41:3f:d4:3f:62:8d:82:ae:22:c3:b2:05:60:aa:
84:18:92:06:3a:78:99:68:7e:5a:8e:7a:a2:22:6a:7c:0d:c4:
24:0a:1e:b6:38:f4:e7:c9:19:fb:21:77:c9:f7:c6:fa:04:6e:
f8:6b:44:72:b2:c5:1a:c9:c5:41:37:cb:5c:82:94:90:84:3b:
5f:dc:2c:b6:48:66:34:4a:db:88:fe:2b:4a:66:4f:fe:fa:87:
df:c8:0b:15:02:1b:33:2a:f4:8f:ff:12:8d:3a:4c:88:34:1a:
98:93:67:f4:d8:e1:ff:a2:6b:50:cc:6b:53:32:e3:60:f0:b4:
9a:aa:e1:13:fe:5e:8c:1f:9d:5b:ec:7f:3c:d9:e7:14:17:fc:
3c:de:39:94:ff:07:60:56:1a:51:4c:fe:9d:ad:08:c7:9a:45:
c9:51:a8:8f:09:9f:14:3d:f1:85:c5:5f:31:57:a3:4b:8d:b9:
68:04:df:0d:91:b9:9c:fa:48:fe:70:9a:2e:58:68:4e:06:65:
5f:50:db:9c:5a:0f:26:65:f3:6d:e0:f6:f0:cf:98:6e:b9:a2:
f1:41:13:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:50:41 2025 by rpki-client